Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.mft
File: OGKIZa_YpN-v3e-BHvz8ecA4czI.mft (raw, json)
Hash identifier: XoJtQ+oBzhVsIXT1iMyMiOhBQAzq6iWI3LCDZxCZUgQ=
Subject key identifier: 0F:AB:68:85:E1:E0:39:98:A5:BE:E2:4F:16:42:35:34:7C:77:A9:2A
Authority key identifier: 38:62:88:65:AF:D8:A4:DF:AF:DD:EF:81:1E:FC:FC:79:C0:38:73:32
Certificate issuer: /CN=38628865afd8a4dfafddef811efcfc79c0387332
Certificate serial: 01A1A7F05E911BC0910F55B7E68220151C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGKIZa_YpN-v3e-BHvz8ecA4czI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.mft
Manifest number: 0FD2
Signing time: Wed 04 Nov 2026 19:01:50 +0000
Manifest this update: Wed 04 Nov 2026 19:01:50 +0000
Manifest next update: Thu 05 Nov 2026 19:01:50 +0000
Files and hashes: 1: OGKIZa_YpN-v3e-BHvz8ecA4czI.crl (hash: Ob2GziKLJn878wGxvUWeXRYBslcdYa58j2b4xmYUJIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGKIZa_YpN-v3e-BHvz8ecA4czI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:f0:5e:91:1b:c0:91:0f:55:b7:e6:82:20:15:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38628865afd8a4dfafddef811efcfc79c0387332
Validity
Not Before: Nov 4 19:01:50 2026 GMT
Not After : Nov 5 19:01:50 2026 GMT
Subject: CN=0fab6885e1e03998a5bee24f164235347c77a92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:37:bb:a2:41:32:e7:77:79:87:8b:81:a6:
ee:b5:e0:e5:cd:9f:d4:7e:97:e0:e8:47:c4:1a:d1:
9b:80:d0:d5:f4:32:fe:2c:72:e6:ff:34:68:13:5a:
6d:a9:64:aa:97:9a:73:ed:d3:f0:31:61:ba:91:1d:
ee:93:13:f9:7b:a1:6d:71:d7:79:1f:80:f6:b0:be:
e6:e5:0b:48:5e:6a:3f:f2:56:cc:a2:97:48:31:33:
75:02:d4:20:a9:74:98:91:1c:ab:ed:d5:17:ec:27:
70:95:bd:5c:28:b4:c5:6c:21:be:6e:5c:4e:60:f0:
fe:a9:e7:38:bd:4b:e1:c2:f7:d3:c3:5e:69:f2:18:
ba:97:37:57:19:d6:f7:33:9c:ad:98:a4:69:15:a5:
c5:bf:37:ac:63:79:d2:d0:d3:6d:4d:af:62:91:4e:
20:8f:12:ea:cd:06:c4:10:fc:de:b6:43:37:81:c3:
40:2f:01:42:91:b6:51:1c:c9:80:88:32:da:74:82:
91:78:6e:98:8c:c5:37:ac:1d:66:8c:ba:b6:9a:37:
45:67:a0:47:4b:b9:cb:96:b7:03:93:f8:06:5b:a3:
39:a5:48:fa:92:fb:f0:8b:f8:97:65:c3:e3:78:ba:
e7:19:a0:2e:05:a7:45:a6:6e:41:bb:2c:6f:92:bf:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:68:85:E1:E0:39:98:A5:BE:E2:4F:16:42:35:34:7C:77:A9:2A
X509v3 Authority Key Identifier:
keyid:38:62:88:65:AF:D8:A4:DF:AF:DD:EF:81:1E:FC:FC:79:C0:38:73:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGKIZa_YpN-v3e-BHvz8ecA4czI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:57:49:77:f2:b9:12:4b:e1:c1:c6:0b:5e:a0:9f:4f:2b:9f:
e5:e0:72:1e:7b:f8:92:29:49:43:e3:9b:5a:34:f7:05:d6:55:
9c:d1:d8:e2:79:7a:90:3f:91:80:0b:23:25:a0:63:f4:51:1c:
9b:3a:a5:34:a6:5e:c6:9c:53:31:b1:be:84:c7:7d:72:95:8a:
bf:8d:98:ae:a9:69:84:e1:9c:a4:a0:e3:c2:e5:9c:1a:45:93:
6b:48:47:09:6a:15:7a:7a:6d:6d:21:7b:a0:f4:c8:b7:82:b6:
67:95:1d:44:8f:f2:51:e3:7c:5e:bf:b8:21:14:3d:e1:b3:d7:
57:d3:49:9a:6b:ca:ba:71:b3:b3:01:b2:61:59:d4:aa:60:7e:
a8:51:d9:43:ef:ad:b3:9a:4b:22:a1:74:26:6c:4e:72:62:3f:
d7:51:f2:0c:75:9f:bd:d8:7e:77:a9:f7:13:5b:fe:7b:74:c7:
45:86:9b:c2:cd:67:ac:c6:59:15:31:3e:c7:c8:8c:da:b3:00:
54:ac:21:8e:0c:9a:14:27:1a:2f:b9:12:35:d6:fb:46:57:92:
cd:86:c7:1c:eb:7e:83:4a:f7:08:2c:6c:c1:8e:b3:9d:05:b3:
e1:b2:cc:28:0c:a0:cf:a7:57:99:33:c9:5e:66:d3:9c:b0:bb:
0a:00:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:13 2026 by rpki-client